Without knowing anything about Apture's implementation, I'm reasonably certain you could block it with NoScript. For highlight, just wait until it comes up then block "highlight.cloudflare.com" (or whatever). While I don't like NoScript's default behavior, it's a godsend if you allow all globally and just blacklist domains you dislike.